[Pkg-openssl-devel] Bug#805646: Bug#805646: Package using openssl functions does not find default certificates

[Sebastian Andrzej Siewior]

On 2022-09-13 18:30:05 [+0200], Kurt Roeckx wrote:
> > > 3) provide a symlink from /usr/lib/ssl/cert.pem to
> > >    /etc/ssl/certs/ca-certificates.crt
> > 
> > Kurt, I tend to provide this symlink. Any objections?
> > I'm kind of confused that it works for others, like curl. But I don't
> > see anything wrong with what is done in this bug report.
> 
> We have a symlink from /usr/lib/ssl/certs to /etc/ssl/certs for ages.

what I see is:
| openat(AT_FDCWD, "/usr/lib/ssl/openssl.cnf", O_RDONLY) = 3
| openat(AT_FDCWD, "/usr/lib/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such file or directory)
| openat(AT_FDCWD, "/usr/lib/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such file or directory)

This is X509_CERT_FILE / X509_get_default_cert_file().

So it would need a symlink from this non existing file to
/etc/ssl/certs/ca-certificates.crt which is provided/ created by
ca-certificates.

> Kurt

Sebastian